It was discovered that Dovecot incorrectly handled closing inactive SSL/TLS connections. A remote attacker could use this issue to cause Dovecot to stop responding to new connections, resulting in a denial of service.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "dovecot-core", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-dbg", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-dev", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-gssapi", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-imapd", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-ldap", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-lmtpd", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-managesieved", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-mysql", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-pgsql", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-pop3d", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-sieve", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-solr", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "dovecot-sqlite", "binary_version": "1:2.2.9-1ubuntu2.1" }, { "binary_name": "mail-stack-delivery", "binary_version": "1:2.2.9-1ubuntu2.1" } ] }